Lucene search
HistorySep 18, 2024 - 3:15 p.m.
CVE-2024-5960
cve-2024-5960
password vulnerability
eliz software panel
known domain credentials
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.6%
Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24.
Affected configurations
Node
elizsoftwarepanelRange<2.3.24
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elizsoftware | panel | * | cpe:2.3:a:elizsoftware:panel:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2024-5960 Plaintext Storage of a Password in Eliz Software's Panel
2024-09-18 14:49:32
cve
cve
CVE-2024-5960
2024-09-18 15:15:18
vulnrichment
vulnrichment
CVE-2024-5960 Plaintext Storage of a Password in Eliz Software's Panel
2024-09-18 14:49:32
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.6%
Related for NVD:CVE-2024-5960